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REMARKS 

Applicant respectfully requests reconsideration of the rejection of this application as 
examined pursuant to the oifice action of October 3, 2005. In the office action. Claims 1 9-36 
were examined. No amendmcDts are made to the claims herein. Therefore, Claims 19-36 remain 
pending. 

Claims 19-24, 26-28, and 30-36 were rejected under 35 USC § 103(a) as being 
unpatentable over Tibor (US Publication No. 2004/02341 17) in view of Wesibrook et al. (US 
Publication No. 2005/0050577. Further in the office action, Claims 25 and 29 were rejected 
under 35 USC § 103(a) as being ui^5atentable over Tibor in view of Ellingson (US Patent No. 
6,87U87), 

Applicant and his representative wish to take this opportunity to thank the examiner, Mr. 
Kindred, for his careful consideration of the claims presented and remarks made in support of the 
patentability of the invention described in the Application. In the October 25, 2005, telephonic 
interview held today among Mr. Kindred, the Applicant and the Applicant's representative, the 
general concept of the invention was discussed, as was tlie language of pending Claim 19. Mr. 
Kindred requested clarification regarding the bounds of the persistent searching conducted 
through the system and method of the present invention. The Applicant summarized the 
claimed novel aspects of the invention and noted that the search bounds may be defmed by the 
search indicia of identity theft established for determination of the unauthorized storage or usage 
of an individual's information. The system and related method of the present invention enable 
the replication of the databases of public, private, and semi-private entities to a system-controlled 
database where searching for indicia of specified personal information takes place. The 
databases searched are those deemed likely to include the indicia including, for example, credit 
reporting bureaus, law enforcement agencies, creditors, debtors, and security organizations. The 
databases may be Internet-based or offline. The present invention replicates those databases and 
then searches them for matching of indicia in maimer that ensures end users are protected from 
public disclosure of their information when the searching is conducted. 

In light of Mr. Kindred's remarks made in the October 25, 2005, interview. Applicant 
respectfully requests reconsideration of the rejection of the pending claims, noting that Claim 19 
as presently written includes reference to "establishing indicia of imauthorized storage or use, or 
inaccuracies, of stored private information" and "persistently scanning one or more network 
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commiinication systems for the indicia " which may be in the one or more databases containing 

stored private information, without requiring initiation of the scanning through an action of the 

one or more individuals." These limitations of the claims presented clearly distinguish the 

present invention from the cited references. 

As Applicant has previously indicated, the Tibor reference appears to be inapplicable to 

the present invention. Tibor describes an electronic transaction verification system, not a 

persistent private information protection system involving the search for indicia of identity theft 

as described by the present invention. As stated in paragraph [00 11) of Tibor: 

The present invention, in its simplest form, combines the use of valid biometric 
samples obtained from authentic identifications (IDs) with biometric samples 
provided bv a person at a transaction location, thereby verifying that the biometric 
information presented for a nransaction is a valid biometric for a particular person. 
In addition, the ID and the biometric sample can also be checked against known 
invalid users. Although it is possible for someone to counterfeit what is believed 
to be the authentic ID, in such cases, the identity thief provides an actual 
fingerprint that has been taken and placed on the token or on the transaction slip . 
When the token is returned to the transaction location as forged, counterfeit, 
stolen, etc., the fingerprint is entered into the database of known invalid users, 
thus preventing any fijrther identity theft activity by this person on the verification 
system. The present invention, in its most complex form, adds additional 
safeguards, such as verifying the ID with information fi^m the state. This ensures 
that an ID has not been altered, and is in &ct an authentic state-issu^ ID (e.g., 
driver's license). Another such safeguard is verifying the information at the 
processing center of the token with the original information that a bank or token 
company obtained at the creation of the bank or token account. (Emphasis 
added.) 

Tibor requires that a person: a) provide a biometric sample; b) present that sample at a 
transaction location; and c) submh a token or a transaction slip in association with an intended 
transaction. The Tibor system then transmits the obtained biometric sample, such as a 
fingerprint, to a database for comparison to a known digitized version of the biometric sample. 
If there is a match, the transaction is approved and may proceed. If there i$ no match, the 
transaction may be denied, and the occurrence may be cataloged. Tibor simply provides a 
mechanism for protection, primarily, of a merchant by improving the opportunity to deny 
transfer of money, goods, etc., to an unauthorized individual. On the other hand, the present 
invention is designed primarily to protect the individual and, indirectly, those who lawfully 
retain the individual's private information in their databases. The present invention does not 
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require a transaction event initiated by the individual to trigger a biometric sample-matching 
event. Instead, the present invention scans for inaccurate private information or misused private 
information and acts upon detecting such inaccuracy or misuse. 

Applicant also notes that the published application of Tibor was filed on April 1, 2004, as 
a continuation-in-part of the application serial no. 09/335,649, filed June 18, 1999, now US 
Patent No. 6,728,397 (the *397 patent). Applicant's representative has reviewed the published 
application and compared the text thereof with the text of the '397 patent. Firstly, it is to be 
noted that the '397 patent was clearly directed solely to the concept of verifying a negotiable 
instrument, a check more particularly, offered at a point of sale. Secondly, many of the sections 
of the Tibor published application cited in paragraph 3 of the April 26, 2005, office action were 
modified fi:om their corresponding sections of the '397 patent. For example, paragraph [001 1) of 
the Tibor reference was not in the '397 patent. Paragraph [0012] of the Tibor reference, 
corresponding to column 1, line 64, to column 2, line 14, of the '397 patent, includes additional 
and expanded descriptions of the information scanned firom the negotiable instrument and data 
transfer. Paragraph [0030] of the Tibor reference, corresponding to column 3, line 65 to column 
4, line 20, of the '397 patent, includes additional and expanded descriptions of the "identification 
database," Paragraph [0034] of the Tibor reference, corresponding to column 5, lines 25-37, of 
the '397 patent, includes additional and expanded descriptions of the processing of data and the 
information contained in the database. The '397 patent makes no mention in that section of the 
patent to a plurality of databases as described in paragraph [0035] of the Tibor reference. 

In addition to the substantial differences between the published Tibor application cited 
and the '397 patent containing lesser information, Applicant respectfully suggests that the 
reference fails to teach one or more of the components that the April 26, 2005, office action 
indicates are taught Specifically, it is stated in paragraph 3 of the office action that Tibor 
teaches persistently scanning one or more network communication systems for indicia (see 
paragraph [0030] and [0035]) ..." However, a review of the noted sections of the Tibor reference 
makes clear that Tibor provides no such teaching. Paragraph [0030] of the Tibor reference 
states: 

Referring now in greater detail to the drawings, in which like numerals represent 
like components throughout the several views, FIG. 1 illustrates a block diagram 
of an exemplary embodiment of the verification system illustrating an electronic 
transaction verification imit 1 0 in communication with a central processing 
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system 12 that includes an identification database 14. The identification database 
can include a n\nnber of databases used in the identification process such as a 
biometric database of known customer data, as well as a separate database of 
known invalid users. The database of known invalid users can be established by 
correlating a biometric presented at a transaction location that is used with a 
fraudulently obtained transaction token, and storing the biometric as invalid. 
Central processing system 12 can be a main system remote from the transaction 
location. While a check is disclosed as one type of token to be processed in an 
exemplary embodiment of the present inventive system, other tokens can be 
processed in the same manner as disclosed herein. Negotiable instrument, as the 
term is used herein is defined in Article 3 .sctn.104 of the Uniform Commercial 
Code. An instrument is negotiable if it is: (1) a written instrument signed by the 
endorser or maker; (2) an unconditional promise to pay a certain amount of 
money, either on demand or at a fixture date; and (3) payable to the holder or 
bearer. Examples of negotiable instruments are checks, bills of exchange, and 
promissory notes. A check as used herein means a draft, payable on demand and 
drawn on a bank, or a cashier or teller's check. This is the customary definition of 
a check. The exemplary embodiment of the electronic transaction verification unit 
10 is comprised of, at least, a check scanner or token reader 16 and a biometric 
data-gathering device 1 8, such as a fingerprint recording device. 

Nowhere in paragraph [0030] of the Tibor reference is there any mention of "persistently 
scanning" (Claim 19 of the present application) or "persistently searching" (Claim 26 of the 
present application) one or more databases that may contain private information for the purpose 
of relating that infonnation with known private information. Paragraph [0030] further makes 
clear that Tibor only reviews its own known customer data or a database of invalid users when 
initiated by a transaction occuning through an action of an individual, namely, the attempt to 
conduct some form of funds transaction. Tibor would not detect an error in private information 
contained in a database, including a legitimate database. Tibor would not move to detect, for 
example, the storage of an individual's credit card information stored in an unauthorized 
database imless and until a transaction was initiated. The present invention, on the other hand, 
persistently checks databases for the individuaPs private information and, if determined to have 
defined indicia, such as unauthorized storage of the credit card number, the individual would be 
notified before an unauthorized transaction is initiated that such unauthorized storage exists. 
Pieventive action may then be undertaken, rather than corrective action. 

Similarly, paragraph [0035] of the Tibor reference fails to describe the persistent 
scanning or searching. Paragraph [0035] states: 
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At the central database 30, the incoming data is compared, either in parallel with 
or separately with token identification data, with the existing known data for 
authorized users of accounts, shown by decision block 32, and an approval is 
made as to whether or not to accept the token. Either a yes decision 34 or a no 
decision 36 on approval is then re-transmitted back to the computer hardware 
platform 28 of the check verification xmit 10. While the check verification unit 10 
is shown in communication with a database 30 remotely located thereiOj it is not 
necessary that the central system 12 or the database 30 be located remotely to the 
electronic transaction verification unit 10, In fact, the electronic transaction 
verification unit 10 and central system 12 can be self-contained at the transaction 
location whereby the central database^ or the account infoimation and biometric 
databases are continually updated within the electronic transaction verification 
unit 10 through either a data connection to a master database or through periodic 
manual updates from storage media such as floppy disks or CD ROMs, In such an 
embodiment, the electronic transaction verification system is preferably self- 
contained and includes all the necessary devices for scanning drivers' licenses 20, 
gathering biometric data (e.g., fingerprints) 1 8, or scanning checks/reading tokens 
16 (gathering check or token information data) within one unit comprising the 
system. 

Nowhere in paragraph [0035] of the Tibor reference is there any mention of "persistently 
scanning" (Claim 19 of the present application) or "persistently searching" (Claim 26 of the 
present application) one or more databases that may contain private information for the purpose 
of relating that information with known private information. Paragraph [0035] makes reference 
to "continually updated," but that is only in respect to the relationship between the central 
database or account and biometric databases, and the master database. Nowhere in paragraph 
[0035] is it suggested that any database not under direct control of the system is persistently 
scanned or searched for the indicia. Instead, it is likely that updating in respect of a particular 
individual's information is only triggered as a result of a transaction. The present invention, on 
the other hand, persistently checks databases for the individual's private information. Upon 
determination that detected information varies with loiown information, the individual is 
notified, the error corrected, or a combination of the two. 

The October 3, 2005, office action combines the alleged teachings of Tibor with the 
alleged teachings of the Westbrook reference. On page 3 of the office action it is noted that 
Westbrook et al. teaches 'Svhich may be in the one or more databases containing stored private 
information, without requiring initiation of the scanning through an action of the one or more 
individuals" (see paragraph [0070], [0098] and [0127]). However, a review of those paragraphs 
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of the Westbrook reference fail to disclose the concept the persistent scanning for the indicia 

without initiation of an action on the part of the individual whose information is tinder search. 

Paragraph [0070] of Westbrook states: 

While the rules for adding objects to the database are important, the rules for 
removing objects ftoni the database are also important in maintaining consistency 
and accuracy, For example, if there were no robust rules for removing objects, the 
database might grow unboundedly over time as obsolete objects accumulate. 

Paragraph [0098] of Westbrook states: 

The slice is transmitted by breaking the encrypted slice into a succession of short 
numbered data packets. These packets are captured by client systems and held in a 
staging area until all packets in the sequence are present. The packets are 
reassembled into the slice, which is then decrypted. The television viewing 
objects within tlie slice are then filtered for ^plicability, possibly being added to 
the local television viewing object database, This process replicates a portion of 
the central database of television viewing objects reliably into the client 

Paragraph [0127] of Westbrook states: 

The service provider may also provide aggregation viewing objects, which 
describe a set of program guide objects that are interrelated in some fashion. For 
instanccj a "Star-Trek** collection might contain references to all program guide 
objects associated with this brand name. Clearly, any arbitrary set of programs 
may be aggregated in this fashion. Aggregation objects are similar to directories. 
For instance, the Star Trek collection might be found at "/showcases/Star Trek'* in 
the hierarchical namespace. Aggregation objects are also program guide objects, 
and may be manipulated in a similar fashion, including aggregating aggregation 
objects, and so forth. 

A feir reading of each of the cited paragraphs reproduced above of the Westbrook 
reference fails to uncover any indication of an arrangement in which the persistent scanning for 
the indicia of imauthorized storage or use, or inaccuracies, of stored private information occurs 
without initiation through an action of the one or more individuals for whom the indicia are 
being examined. Moreover, the Westbrook reference appears to be directed to a system for 
detecting television viewing habits. Unlike the present invention, it is not related to reducing the 
harm caused by identity theft. 

Finally, as Applicant noted in the response entered prior to the presently pending office 
action, the EUingson provides no indication of a system for persistently scanning or searching 
databases for private information as it relates to known private infonnation, and doing such 
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scanning or searching without first requiring a triggering action by an individual, Ellingson 
appears to be solely relied upon as teaching the concept of Internet search engines, such as 
Yahoo, Google, etc. The present invention as claimed in the noted claims is directed to an 
identity theft protection system. The generjil concept of searching databases is not considered to 
be a novel aspect of the present invention. Instead, the present invention employs database 
searching techniques to discover indicia of identity theft. The searching is conducted on a 
secured database populated through replication of existing databases likely to include such 
indicia. 



CONCLUSION 

In view of the discussions held in the interview of October 25, 2005, and the remarks 
presented herein. Applicant respectfully suggests that the presently pending claims clearly 
describe the present invention and distinguish it over the cited references. It is therefore 
requested that this application be allowed to pass to issuance. 

Applicant notes that no new claims have been added by this request and respectfully asks 
that it be entered in the file for consideration. No additional filing fee is required. 



Respectfidly submitted, 

Chris A, Caseiro, Reg. No. 34.304 
Attorney for Applicant 
Verrill Dana, LLP 
One Portland Square 
Portland, ME 041 12-0586 
Tel. No. 207-253-4530 



Certificate of Mailing 



I hereby certify that this correspondence is being transmitted to the examiner's attention. 
Art Unit 2163, at facsimile transmission number 1-571-273-8300 on October 25, 2005. It is 
hereby requested that this communication be assigned a filing date of October 25, 2005. 

Chris A. Caseiro 
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